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Senate Bill 21 

By: Senators James of the 35th, Rhett of the 33rd, Seay of the 34th and Jones II of the 22nd 


A BILL TO BE ENTITLED 
AN ACT 

1 To amend Part 2 of Article 6 of Chapter 2 of Title 20 of the Official Code of Georgia 

2 Annotated, relating to competencies and core curriculum, so as to require each local board 

3 of education to prescribe mandatory instruction concerning cybersecurity in every year in 

4 every grade from kindergarten through grade 12; to provide for a definition; to require the 

5 State Board of Education to prescribe a minimum course of study in cybersecurity; to provide 

6 for duties of the State School Superintendent; to provide for dates of implementation; to 

7 provide for related matters; to repeal conflicting laws; and for other purposes. 

8 BE IT ENACTED BY THE GENERAL ASSEMBLY OF GEORGIA: 

9 SECTION 1. 

10 Part 2 of Article 6 of Chapter 2 of Title 20 of the Official Code of Georgia Annotated, 

11 relating to competencies and core curriculum, is amended by adding a new Code section to 

12 read as follows: 

13 " 20-2-149.3. 

14 (a) As used in this Code section, the term 'cvbersecuritv' means the practice of defending 

15 computers, servers, mobile devices, electronic systems, networks, and data from criminal 

16 or unauthorized use or attacks. 

17 (b) Each local board of education shall prescribe mandatory instruction concerning 

18 cvbersecuritv in every year in every grade from kindergarten through grade 12 as shall be 

19 determined by the State Board of Education. Such course of study shall implement the 

20 minimum course of study provided for in subsection (c) of this Code section or its 

21 equivalent, as approved by the State Board of Education. Each local board of education 

22 may supplement the exact approach of content areas of such minimum course of study with 

23 such curriculum standards as it may deem appropriate. 

24 (c) The State Board of Education shall prescribe a minimum course of study in 

25 cvbersecuritv. Instruction also shall be integrated into other curriculum requirements as 

26 determined by the State Board of Education. The course shall be age appropriate, shall be 
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27 sequential in method of study, and shall include the following elements where appropriate 

28 in the instruction: 

29 (1) Introduction to information technology and cvbersecurity in daily life: 

30 ( 2 ) Information technology and cvbersecurity terms: 

31 (3) Cvbersecurity career choice investigation and exposure through research projects and 

32 applied knowledge: and 

33 (4) Coursework leading to certification from a recognized accrediting agency in 

34 cvbersecurity. as determined by the State School Superintendent, for students indicating 

35 an election and intention to pursue a career in cvbersecurity. 

36 (d) A manual setting out the details of such course of study shall be prepared by or 

37 approved by the State School Superintendent and such expert advisers as he or she may 

38 choose. 

39 (e) The minimum course of study to be prescribed by the State Board of Education 

40 pursuant to subsection (c) of this Code section shall be ready for implementation not later 

41 than July 1. 2020. Each local board of education shall implement such minimum course 

42 of study or its equivalent not later than December 31.2020. Any local board of education 

43 which fails to comply with this subsection shall not be eligible to receive state funding 

44 under this article until such minimum course of study or its equivalent has been 

45 implemented. " 

46 SECTION 2. 

47 All laws and parts of laws in conflict with this Act are repealed. 
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